$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e88234a-c7d5-3e41-b543-d78b2aeaba5f.roa File: 8e88234a-c7d5-3e41-b543-d78b2aeaba5f.roa (raw, json) Hash identifier: MWGjeuOK+ty4sEK4wj03WVyIeX4q26BqOdAUUU54Ae0= Subject key identifier: C6:85:55:85:25:54:EE:D3:69:97:78:74:25:13:25:86:CF:A3:EA:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D57CF39799A3A8FF610330C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e88234a-c7d5-3e41-b543-d78b2aeaba5f.roa Signing time: Mon 30 Mar 2026 18:54:26 +0000 ROA not before: Mon 30 Mar 2026 18:54:26 +0000 ROA not after: Sun 28 Jun 2026 18:54:26 +0000 asID: 7029 IP address blocks: 2001:19b0:a40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:cf:39:79:9a:3a:8f:f6:10:33:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 18:54:26 2026 GMT Not After : Jun 28 18:54:26 2026 GMT Subject: CN=f26aaac0-be68-42ce-ab19-28548657b1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:68:f0:18:99:54:93:12:13:66:5e:67:68:07: 88:21:86:4d:26:09:bc:92:2d:03:ed:71:8c:a2:08: 6a:7f:c5:29:9b:75:01:81:f1:17:f0:77:77:7a:b5: 1e:c9:90:fe:e8:2d:1d:48:69:30:d9:dd:81:cd:d0: 35:6a:46:28:5a:38:47:23:a9:cd:65:29:4d:c1:00: 89:28:80:29:d4:d3:e5:21:a0:30:27:5c:62:84:4c: 3d:ca:3f:26:20:e3:6a:a1:ed:d3:cb:3d:9c:cd:7f: a9:a2:18:c9:5e:3a:4d:67:f0:26:ec:29:70:dd:4c: 8a:6c:a1:ac:70:ee:83:38:27:a8:fc:b5:fa:94:ad: 76:74:9b:ce:46:35:49:6e:24:78:6d:45:61:36:b8: 71:fc:54:a2:b3:c5:99:07:b1:64:4b:c7:4d:e7:ef: 0a:cb:28:12:e4:c4:43:af:b9:6c:2f:00:28:9e:ca: a7:9c:78:8f:e4:cc:60:08:ca:c7:71:e5:cd:f6:b2: a7:b6:28:fc:cc:e8:48:1a:5d:8a:7f:8c:78:2a:a5: ee:26:2d:4c:17:13:7b:3d:26:50:65:5a:90:e1:a9: 3b:5b:78:9c:8c:68:09:71:26:35:a9:fd:f4:ac:dd: 9e:83:f8:f1:a0:b6:8f:c2:38:58:5e:84:52:a3:ca: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:85:55:85:25:54:EE:D3:69:97:78:74:25:13:25:86:CF:A3:EA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e88234a-c7d5-3e41-b543-d78b2aeaba5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0:a40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:99:ff:57:18:2e:5a:4f:4b:7d:0e:82:54:51:da:21:ef:b6: e8:98:2b:a9:06:ae:ba:09:4f:70:4f:02:a1:6c:6a:d5:fc:f6: db:48:0b:1f:a8:3b:31:fa:28:26:f4:d7:f5:e5:40:66:bb:68: 97:38:72:38:c8:b9:a1:79:47:74:6b:bc:cb:42:b9:ba:69:f5: 84:6e:7e:e3:49:53:30:25:bf:62:14:9d:56:4a:a1:c5:c5:f3: e7:74:ad:fb:a4:46:36:cf:5a:3b:a0:b3:80:18:55:ca:af:95: 0a:60:6b:28:2a:bc:67:b0:56:07:bb:b9:1b:c5:4b:46:90:37: ac:e1:b9:c3:46:a7:22:42:98:8b:d1:ee:3f:2a:59:32:3d:1c: 61:a2:83:5c:4a:0f:29:82:37:13:51:46:ba:e4:46:9c:45:bf: fa:a4:4e:db:88:b9:34:02:f6:80:49:05:22:e2:54:8e:ec:a1: 59:fb:49:c3:2a:22:1b:92:e0:85:22:cd:38:04:b5:3e:22:38: b7:cd:59:33:d2:d0:da:e0:eb:c8:62:92:f0:99:22:29:b7:e0: 2e:ff:c5:cd:85:05:3e:c1:2f:cb:94:27:60:1d:ab:75:57:c2: 6a:e4:2c:1b:c1:df:4e:ce:d5:f2:d6:af:2e:0f:3a:2d:75:86: bf:60:0d:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Xzzl5mjqP9hAzDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDE4NTQyNloXDTI2MDYyODE4NTQyNlowLzEtMCsGA1UEAxMk ZjI2YWFhYzAtYmU2OC00MmNlLWFiMTktMjg1NDg2NTdiMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GjwGJlUkxITZl5naAeIIYZNJgm8ki0D7XGM oghqf8Upm3UBgfEX8Hd3erUeyZD+6C0dSGkw2d2BzdA1akYoWjhHI6nNZSlNwQCJ KIAp1NPlIaAwJ1xihEw9yj8mIONqoe3Tyz2czX+pohjJXjpNZ/Am7Clw3UyKbKGs cO6DOCeo/LX6lK12dJvORjVJbiR4bUVhNrhx/FSis8WZB7FkS8dN5+8KyygS5MRD r7lsLwAonsqnnHiP5MxgCMrHceXN9rKntij8zOhIGl2Kf4x4KqXuJi1MFxN7PSZQ ZVqQ4ak7W3icjGgJcSY1qf30rN2eg/jxoLaPwjhYXoRSo8pHdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMaFVYUlVO7TaZd4dCUTJYbPo+oQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU4ODIzNGEtYzdkNS0z ZTQxLWI1NDMtZDc4YjJhZWFiYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsApA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCZ/1cYLlpPS30OglRR2iHvtuiYK6kGrroJT3BPAqFsatX89ttI Cx+oOzH6KCb01/XlQGa7aJc4cjjIuaF5R3RrvMtCubpp9YRufuNJUzAlv2IUnVZK ocXF8+d0rfukRjbPWjugs4AYVcqvlQpgaygqvGewVge7uRvFS0aQN6zhucNGpyJC mIvR7j8qWTI9HGGig1xKDymCNxNRRrrkRpxFv/qkTtuIuTQC9oBJBSLiVI7soVn7 ScMqIhuS4IUizTgEtT4iOLfNWTPS0Nrg68hikvCZIim34C7/xc2FBT7BL8uUJ2Ad q3VXwmrkLBvB307O1fLWry4POi11hr9gDdY= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:45 2026 by rpki-client